NVD HIGH: CVE-2026-15135 — A security flaw has been discovered in code-projects Online Food Order System 1....

Thursday, July 9, 2026 at 12:17 AM UTC·Source: NIST NVD

Updated: Thursday, July 9, 2026 at 01:00 AM UTC

Executive Summary

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit_food_items.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-15135

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Jul 9, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

UniCredit, Accenture, and IBM join forces for pan-European banking expansion

UniCredit, one of Europe's leading pan-European banking groups, Accenture and IBM have announced a long-term strategic collaboration that establishes the technology foundation supporting UniCredit's growth across the thirteen European markets in which the Group operates.

17m agoFinextra

MEDIUMVulnerabilityNEW

South African crypto platform Luno to axe 20% of staff

Digital Currency Group’s crypto exchange Luno will cut 20% of its global staff in restructures, Bloomberg reported on Tuesday.

50m agoFinextra

MEDIUMVulnerability

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,

1h agoThe Hacker News